Skip to content

Broken DataSource Variables in DMARC Reports Dashboard #16

@hexxone

Description

@hexxone

I had some problems with getting the Parsedmarc Dashboard running correctly with Elasticsearch 7 and current Grafana.

In hindsight there were 2 big problems.

  1. MY DataSource names for the Variables for "Aggregate" and "Forensic" did not match the "Variable regex".
    • Because of this they were not found and I didnt notice because they are hidden by default..
    • Fixed it by changing the regex to be case insensitive and "more generic" (I only have 2 ES-datasources anyway)
    • OLD: "regex": "/.*dmarc-ag/" AND "regex": "/.*dmarc-fo/"
    • NEW: "regex": "/.*agg.*/i" AND "regex": "/.*for.*/i",
  2. Some of the DataSource variables were incorrect and tried to reference the "Import Variable" ${DS_ELASTICSEARCH-DMARC-AG} or ${DS_ELASTICSEARCH-DMARC-FO}.
    • This would mean they got replaced with "constant values" on Import and break the dashboard.
    • Fixed it by replacing all these variables with respecetively ${datasourceag} and ${datasourcefo} Variables BEFORE importing!
    • This way, these datasource will NOT get replaced on Import and it will work accordingly, even when used from "provisioning" directly.

Here is my final Dasboard:

DMARC_REPORTS_11227_rev7_FIXED.json

I hope this helps and can maybe get incorporated into your version :)

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions